KR102672066B1 - A communication terminal that performs quantum cryptographic communication mounted on an unmanned mobile vehicle - Google Patents

Abstract

The present invention relates to a communication terminal that performs quantum encryption communication mounted on an unmanned vehicle. In the communication terminal that performs quantum encryption communication mounted on an unmanned vehicle, a series of first quantum particles generated by passing through a first quantum filter are provided. An optical communication unit that receives signals; A quantum signal generator that generates a first quantum signal by setting a first quantum filter in the receiving path of a series of second quantum signals generated and transmitted from the server; and a processor that selects the setting of the first quantum filter based on a series of randomly generated first quantum states and controls the quantum signal generator to generate the first quantum signal by the first quantum filter, the processor , a random number generator that randomly generates a series of first quantum states based on random numbers; Information on the first quantum filter is transmitted to the server via a communication network different from the path through which the first quantum signal is received, information on the second quantum filter is received from the server, and information on the first quantum filter and the second quantum filter are transmitted. An encryption unit that generates an encryption key with the server based on the information; and a user authentication unit that performs user authentication with the server using an encryption key.

Description

{A communication terminal that performs quantum cryptographic communication mounted on an unmanned mobile vehicle}

The present invention relates to a communication terminal that performs quantum encryption communication mounted on an unmanned vehicle, and particularly relates to a communication terminal that is mounted on a drone and is used to maintain high security in the process of performing quantum encryption communication with a server.

The matters described in this background art section are written to improve understanding of the background of the invention, and may include matters that are not prior art already known to those skilled in the art in the field to which this technology belongs.

As the use of wired and wireless communications, including the Internet, is rapidly expanding, the importance of communication network security issues is increasing in terms of protecting important national, corporate, and financial secrets and personal privacy. The asymmetric public key encryption system, which was developed in the 1970s and is currently widely used in communication systems such as the Internet, is a method of encrypting information using a very difficult to solve mathematical problem as a public key and decrypting it using the solution as a secret key. It is based on mathematical ‘computational complexity’.

Typically, the RSA public key cryptosystem developed by three people, including Rivest, Shamir, and Adleman, takes advantage of the fact that it is very difficult to prime factorize very large numbers. In other words, mathematically, the calculation time for the prime factorization problem increases exponentially as the size of the problem increases. Therefore, if the sender and receiver use the prime factorization problem of a sufficiently large number as a public key, it is realistically difficult for an eavesdropper to decrypt the ciphertext. Take advantage of the fact that it would be impossible. However, the safety of the encryption system based on this mathematical computational complexity is being questioned as more sophisticated algorithms develop, and in 1994, AT&T's Peter Shor developed a prime factorization algorithm using a quantum computer, leading to the development of a quantum computer. It has been proven that the RSA encryption system can be fundamentally cracked.

Quantum cryptography technology, which has emerged as an alternative to solve these security problems, is receiving great attention recently as its security is based on the principles of quantum mechanics, a fundamental law of nature, rather than mathematical computational complexity, making wiretapping and eavesdropping very difficult. . In other words, quantum cryptography communication technology is a technology that absolutely safely distributes secret keys (one-time random number tables) between sender and receiver in real time based on the laws of quantum physics such as 'quantum duplication impossibility', and is called "Quantum Key Distribution Technology (QKD) ), also known as “.

The first quantum cryptography protocol was developed in 1984 by IBM's C.H. Bennett and G. Brassard of the University of Montreal. This protocol, named the BB84 protocol after its creators, uses four quantum states (e.g., the polarization state of a single photon) forming two basis.

An example of this quantum cryptography communication technology is described in Electronic Communication Trend Analysis Volume 20, No. 5, October 1405, “Quantum Cryptography Communication Technology.”

The above prior art is about quantum cryptography communication technology that uses a quantum system in a Hilbert space with dimension 2, that is, a qubit (quantum bit).

Conventional research and development on quantum cryptography communication technology has generally focused on efforts to increase the reception sensitivity of quantum cryptography and improve the reception reliability of quantum cryptography. Therefore, there are barriers that make it difficult for general users to access, and despite its excellent security performance, it is preventing it from expanding to various industrial fields.

“Quantum cryptography communication technology” Electronic Communication Trend Analysis Vol. 20, No. 5, October 2005

The purpose of the present invention is to provide a communication terminal that performs quantum encryption communication mounted on an unmanned vehicle, which allows the user to perform user authentication while maintaining high security.

In addition, the purpose of the present invention is to provide a communication terminal that performs quantum encryption communication mounted on an unmanned vehicle, capable of stable transmission and reception of data even if the encryption key is lost due to external factors such as hacking during operation based on an encryption key. do.

delete

In addition, the present invention provides a communication terminal that performs quantum encryption communication mounted on an unmanned vehicle, which enables quantum encryption communication in various electronic devices, simplifying the overall structure and enabling encryption communication at low cost. The purpose is to

In addition, the present invention is a method of performing quantum cryptography communication mounted on an unmanned vehicle, which can improve the accuracy of cryptographic authentication by correcting errors caused by warping of space and time due to gravity when quantum polarization is transmitted through a satellite. The purpose is to provide a communication terminal.

In addition, the present invention performs quantum encryption communication mounted on an unmanned vehicle, which maintains high security by monitoring and preventing hacking even if there is a hacking attempt using an active attack technique where an illegal intruder disguises himself as a legitimate sender and sends a message. The purpose is to provide a communication terminal.

A communication terminal performing quantum encryption communication mounted on an unmanned vehicle according to an embodiment of the present invention includes a series of signals generated by passing through a first quantum filter. An optical communication unit that receives a first quantum signal; A quantum signal generator that generates a first quantum signal by setting a first quantum filter in the receiving path of a series of second quantum signals generated and transmitted from the server; and a processor that selects the setting of the first quantum filter based on a series of randomly generated first quantum states and controls the quantum signal generator to generate the first quantum signal by the first quantum filter, the processor , a random number generator that randomly generates a series of first quantum states based on random numbers; The information of the first quantum filter is transmitted to the server via a communication network different from the path through which the first quantum signal is received, the information of the second quantum filter is received from the server, and the information of the first quantum filter and the second quantum filter are transmitted. An encryption unit that generates an encryption key with the server based on the information; and a user authentication unit that performs user authentication with the server using an encryption key.

Here, the encryption unit generates either a one-time encryption key or a plurality of encryption keys, and generates a symmetric encryption key based on natural quantum random numbers.

In addition, when generating a one-time encryption key, the encryption unit deletes the previously stored encryption key and uses a new encryption key one-time, and records the usage time or number of uses of the encryption key used when generating multiple encryption keys. The change cycle is determined by counting, and as the change cycle is determined, the encryption key in use is deleted and a new encryption key is used.

delete

In addition, the encryption unit divides and generates quantum encryption keys in advance according to one or more predetermined requirements from the pre-generated quantum key stream, and considers the generation and allocation history of quantum encryption keys for each requirement standard to generate quantum encryption keys for each requirement standard. Adjust the encryption key ratio.

In addition, the encryption unit is connected to the first quantum signal and the second quantum signal through a receiving path, and further includes an add-on chip that is coupled and detachably connected to the electronic device by a unique identification code, and the encryption unit must be encrypted. Determine the content, generate a pair of master key and session key, store them in the add-on chip, encrypt the content by combining it with the session key, and transmit it to the electronic device, and the electronic device decrypts the encrypted content.

Additionally, the quantum signal generator corrects the angle of the second quantum filter.

In addition, the quantum signal generator Calculate the amount of rotation of polarized light according to the relationship, Rotate the second quantum filter at an angle of ( is the angular momentum per unit mass of the satellite, is the distance to the satellite, is the Schwarzschild radius of the Earth).

In addition, the random number generator detects a hacking attempt using an active attack technique in which an illegal intruder disguises himself as a legitimate sender and sends a message to the first quantum signal, first quantum filter, second quantum signal, or data of the second quantum filter transmitted and received from the server. and protects against hacking attempts by receiving biometric signals from security personnel.

In addition, the random number generator uses the characteristics of quantum mechanics using the biometric signals of the security personnel to generate pure random numbers that are unpredictable and have no pattern, thereby preventing the hacking attempt.

According to the present invention, user authentication can be performed while allowing the user to maintain high security.

In addition, the present invention, based on an encryption key, enables stable data transmission and reception even if the encryption key is lost due to external factors such as hacking during operation.

delete

In addition, the present invention enables quantum encrypted communication in various electronic devices, simplifying the overall structure and enabling encrypted communication at low cost.

In addition, the present invention can improve the accuracy of cryptographic authentication by correcting errors caused by the warping of space and time due to the polarization of the quantum when transmitting quantum through a satellite.

In addition, the present invention maintains high security by monitoring and preventing hacking even if there is a hacking attempt using an active attack technique where an illegal intruder disguises himself as a legitimate sender and sends a message.

Figure 1 is a diagram showing the communication relationship between a communication terminal and a server according to an embodiment of the present invention.
Figure 2 is a diagram showing in detail a communication terminal according to an embodiment of the present invention.
Figure 3 is a detailed diagram of a communication server according to an embodiment of the present invention.
Figure 4 is a diagram illustrating a quantum cryptography-based communication and user authentication network system including a repeater according to an embodiment of the present invention.
Figure 5 is a diagram showing an optical communication unit of a terminal for quantum encryption communication and a communication server according to an embodiment of the present invention.

The advantages and features of the present invention and methods for achieving them will become clear with reference to the embodiments described below along with the accompanying drawings. However, the present invention is not limited to the embodiments disclosed below and may be implemented in various different forms. Only the examples are provided to make the disclosure of the present invention complete and to fully convey the scope of the invention to those skilled in the art to which the present invention pertains, and the present invention is defined by the scope of the claims. It's just that.

Figure 1 is a diagram showing the communication relationship between a communication terminal and a server according to an embodiment of the present invention.

Referring to FIG. 1, the communication terminal 110 of the present invention is mounted on a drone and can perform quantum encrypted communication, generates a quantum password, and transmits the polarization basis information used to generate the quantum password to the server 120. Share.

Additionally, an embodiment in which the communication terminal 110 and the server 120 each generate a quantum password and receive the quantum password generated by the other party is also possible.

The polarization signal containing the quantum encryption generated in the communication terminal 110 is transmitted to the communication server 120 through the optical communication channel 130, and the polarization base used to generate the quantum encryption in the communication terminal 110 Information can be shared between the communication terminal 110 and the communication server 120 via a general communication network 140. The server 120 receives and interprets the polarization signal, and at this time, the polarization basis information used to interpret the polarization signal can be shared with the communication terminal 110 via the communication network 140.

Since the communication terminal 110 also includes an optical reception module, it can receive a polarized signal including the quantum encryption generated by the server 120 through the optical communication channel 130. At this time, since the state value of the polarization signal may change as it passes through the polarization filter, for convenience, the polarization signal transmitted from the transmitting side may be referred to as the first polarization signal, and the received signal passing through the polarization filter on the receiving side may be referred to as the second polarization signal.

At this time, the communication terminal 110 may transmit and receive a polarized signal including quantum cryptography to the server 120 via an optical fiber capable of optical communication. On the other hand, when the communication terminal 110 is a mobile terminal, a polarized signal containing quantum cryptography is transmitted from the communication terminal 110 by a free-space optical communication technique, and is transmitted from the communication server 120 You can receive it. Additionally, a polarized signal can be transmitted through the opposite path. At this time, free space optical communication is an optical system used in an environment where the polarized signal transmitted from the communication terminal 110 can directly reach the server 120 without any obstacles on the path from the communication terminal 110 to the server 120. It means communication technique. Free space optical communication can also be interpreted as a face-to-face method. The communication terminal 110 may transmit a polarized signal using a laser diode (LD) or photo diode (PD).

In addition, the communication terminal 110 and the server 120 receive polarized light used to generate quantum cryptography from each of the communication terminal 110 or the server 120 via a general communication network 140 including a wired communication network or a wireless communication network. Basic information can be shared with each other. At this time, each of the communication terminal 110 and the communication server 120 has a polarization basis based on a series of quantum states randomly generated by the random number generator (RNG) of each of the communication terminal 110 and the communication server 120. It generates information, and this polarization basis information can be shared with each other. At this time, random number generation may be performed using a quantum random number generator (QRNG) to obtain more complete randomness.

In Figure 1, an embodiment of transmitting quantum cryptography directly from the communication terminal 110 to the server 120 and from the server 120 to the communication terminal 110 is shown, but the idea of the present invention is not limited to this and the relay device is An embodiment of relaying and transmitting a polarization signal is also possible.

Figure 2 is a diagram showing in detail a communication terminal according to an embodiment of the present invention.

Referring to FIG. 2, the communication terminal 200 includes a polarization generator 210, an optical communication unit 220, a quantum signal generator 230, and a processor 240, and the processor 240 includes a random number generator ( 241), an encryption unit 242, and a user authentication unit 243.

The polarization generator 210 may refer to a polarization filter and generates a series of first polarization signals using first polarization basis information. At this time, the first polarization basis information can be explained based on the polarization basis information. For convenience of explanation, it may be a 0-degree base or a 45-degree base. The first polarization signal refers to a signal in which a series of randomly generated bits with a value of 0 or 1 pass through a polarization filter.

The optical communication unit 220 receives a series of first quantum signals generated by passing through the first quantum filter. Here, the first quantum filter may be polarization basis information, and the first quantum signal may be a polarization signal.

The optical communication unit 220 transmits a series of first polarization signals generated by the polarization generator 210 to the server, and the server receives the first polarization signal as a second polarization signal generated by passing the second polarization basis information. can do. Additionally, the server may generate a third polarization signal using the third polarization basis information and transmit the third polarization signal. At this time, the optical communication unit 220 may receive a series of third polarization signals generated from the server by passing the fourth polarization basis information. At this time, polarization signal transmission and reception between the communication terminal 200 and the server may be performed directly without an intermediate relay device, or may be transmitted through a repeater.

At this time, the optical communication unit 220 may transmit a series of polarized signals to the server and receive a series of polarized signals from the server using a free-space optical communication technique. Free space optical communication refers to optical communication by face-to-face method. The distance between the optical communication unit 220 and the server may be reduced to less than the standard distance.

This may be referred to as proximity free-space optical communication.

At this time, the laser diode and photo diode do not need to have high output, but can have an output sufficient to transmit quantum cryptography through free space optical communication or face-to-face optical communication between the communication terminal 200 and the server or repeater.

For example, when the distance between the communication terminal 200 and a repeater or server is less than 10 cm, a laser diode or photo diode with an output sufficient to transmit and receive quantum cryptography without loss is installed in the communication terminal 200. This means that it is mounted.

The repeater or server may be implemented in the form of an ATM or Point of Sales (POS) terminal, or in the form of a set-top box for general homes or offices. At this time, the user will be able to bring the terminal 200 as close to the repeater or server as possible, so the distance between the terminal 200 and the repeater or between the terminal 200 and the server may be within 10 cm. In this way, when the terminal 200 is close to a repeater or server, it is unlikely that external eavesdropping will intervene between the terminal 200 and the repeater or server, and therefore, it is unlikely that the quantum password between the terminal 200 and the repeater or server will be eavesdropped. The probability will be very low.

If the close free space optical communication technique is applied between the terminal 200 and a repeater or server, the output of the optical communication unit 220 mounted on the terminal 200 does not need to be high, and the receiving module of the optical communication unit 220 also requires low-specification hardware. It can be implemented as: In particular, in order to receive quantum cryptography, an expensive detector and attenuator capable of detecting one photon unit from a polarized signal are required. At this time, if it is possible to predict that the communication distance between the terminal 200 and the repeater or server will be within the standard distance, the output of the optical signal transmitted from the server or repeater can be optimized, and the terminal 200 is equipped with an attenuator and an attenuator with minimum specifications. Even if a detector is installed, quantum cryptographic communication and authentication functions will be possible.

The quantum signal generator 230 generates a first quantum signal by setting a first quantum filter in the receiving path of a series of second quantum signals generated and transmitted from the server. Here, the second quantum filter may be polarization basis information, and the second quantum signal may be a polarization signal.

The quantum signal generator 230 corrects the angle of the second quantum filter. The quantum signal generator 230 is Calculate the amount of rotation of polarized light according to the relationship, The second quantum filter can be rotated at an angle of ( is the angular momentum per unit mass of the satellite, is the distance to the satellite, is the Schwarzschild radius of the Earth).

Accordingly, when transmitting protons through a satellite, the polarization of the protons can improve the accuracy of cryptographic authentication by correcting errors caused by the bending of space and time due to gravity.

The processor 240 selects the setting of the first quantum filter based on a series of randomly generated first quantum states, and controls the quantum signal generator 230 to generate the first quantum signal by the first quantum filter. do. That is, the processor 240 selects the setting of the first polarization basis information based on a series of randomly generated first quantum states, and the polarization generator so that a series of first polarization signals are generated by the first polarization basis information. (210) can be controlled.

The processor 240 may select fourth polarization basis information based on a series of randomly generated fourth quantum states. The polarization generator 210 may be controlled so that the third polarization signal transmitted from the server passes through the fourth polarization base information and is received by the optical communication unit 220 as a fourth polarization signal.

Additionally, the processor may include a random number generator 241, an encryption unit 242, and a user authentication unit 243.

The random number generator 241 randomly generates a series of first quantum states or fourth quantum states based on random numbers. At this time, the random number generator 241 may further increase the randomness of the quantum state by using a quantum random number generator (QRNG).

In addition, the random number generator 241 uses an active attack technique in which an illegal intruder disguises himself as a legitimate sender and sends a message to the first quantum signal, first quantum filter, second quantum signal, or data of the second quantum filter transmitted and received from the server. It is possible to detect hacking attempts and receive biometric signals from security personnel to defend against the hacking attempts.

In addition, the random number generator 241 can prevent hacking attempts by generating unpredictable and pattern-free pure random numbers using the characteristics of quantum mechanics using the security officer's biosignal.

Accordingly, even if there is a hacking attempt using an active attack technique where an illegal intruder disguises himself as a legitimate sender and sends a message, high security is maintained by monitoring and preventing hacking.

The encryption unit 242 may control the communication module of the communication terminal to transmit the first polarization base information to the server via a communication network different from the path through which the first polarization signal is received. At this time, the communication module is a module that uses general wired and wireless communication of a communication terminal. The communication module may use wired or wireless communication and generate a first encryption key based on the first polarization basis information and the second polarization basis information.

Additionally, the encryption unit 242 may generate either a one-time encryption key or a plurality of encryption keys, and may generate a symmetric encryption key based on natural quantum random numbers. In addition, when generating a one-time encryption key, the encryption unit 242 deletes the previously stored encryption key and uses a new encryption key one-time, and determines the usage time of the encryption key used when generating a plurality of encryption keys. Alternatively, the change cycle is determined by counting the number of uses, and as the change cycle is determined, the encryption key in use can be deleted and replaced with a new encryption key.

Accordingly, stable data transmission and reception is possible even if the encryption key is lost due to external factors such as hacking during operation based on the encryption key.

delete

delete

In addition, the encryption unit 242 divides and generates a quantum encryption key in advance according to one or more predetermined requirement standards from the pre-generated quantum key stream, and generates and generates the quantum encryption key by considering the generation and allocation history for each requirement standard. The rate of quantum encryption keys generated for each standard can be adjusted.

In addition, the encryption unit is connected through a receiving path of the first quantum signal and the second quantum signal, and may further include an add-on chip (not shown) that is coupled and detachably connected to the electronic device by a unique identification code. At this time, the encryption unit determines the content to be encrypted, generates a pair of master key and session key, stores it in the add-on chip, encrypts the content by combining it with the session key, and transmits it to the electronic device. Electronic devices can decrypt encrypted content.

Accordingly, quantum encrypted communication is possible in various electronic devices, simplifying the overall structure and enabling encrypted communication at low cost.

The user authentication unit 243 performs user authentication with the server using the generated first encryption key or the second encryption key generated from the quantum encryption received from the server.

At this time, the process of sharing the first polarization base information, the second polarization base information, the third polarization base information, and the fourth polarization base information or conveying the success of user authentication is performed using a normal wired communication network or a wireless communication network. You can. The first encryption key consists of quantum ciphers that have been confirmed to have been stably received by the server 300 among the quantum ciphers transmitted by the terminal 200. The second encryption key consists of quantum ciphers that have been confirmed to have been stably received by the terminal 200 among the quantum ciphers transmitted by the server 300. Since only the terminal 200 and the server 300 know the first encryption key and the second encryption key, eavesdropping/eavesdropping by a third party is impossible.

Accordingly, user authentication can be performed while allowing the user to maintain high security.

As described above, when the present invention is applied to a drone, the security level of the drone's communication network can be increased through quantum encryption, so it can be usefully used for military security purposes.

Figure 3 is a diagram showing in detail a server for quantum cryptography authentication according to an embodiment of the present invention.

Referring to FIG. 3, the quantum cryptography authentication server 300 includes an optical communication unit 310, a processor 320, and a polarization generator 330, and the processor 320 includes a random number generator 321 and an encryption unit. (322) and a user authentication unit (323).

At this time, the server 300 may include, without limitation, a fixed terminal capable of banking, finance, or card payments and equipped with a security function, such as a POS terminal or a bank ATM terminal. The server 300 shares the information obtained through communication and authentication with the communication terminal 200 with a service provider (SP) that provides card, financial, or financial services to enable payment, banking, or You can perform finance transactions.

The server 300 is a device that performs mutual authentication with the communication terminal 200, and does not need to be the final server for authentication and transactions. That is, the secondary server owned by the service provider (SP) finally approves the transaction, and the server 300 can only perform authentication for the user of the communication terminal 200.

The processor 320 may determine polarization characteristics of the polarization generator 330.

The processor 320 may include a random number generator 321, an encryption unit 322, and a user authentication unit 323. At this time, the random number generator 321 may generate a series of quantum states based on random numbers.

When the first polarization signal is transmitted from the communication terminal 200 by the first polarization basis information generated by the first quantum state, the first polarization signal passes through the second polarization basis information of the polarization generator 330 and becomes the first polarization basis information. 2 It is reconstructed as a polarization signal. At this time, the second polarization basis information may be generated based on the second quantum state generated by the random number generator 321.

Meanwhile, the random number generator 321 may generate a third series of quantum states based on another random number. Based on the third quantum state, the processor 320 may control the polarization generator 330 so that the polarization generator 330 has polarization characteristics corresponding to the third polarization basis information. The optical communication unit 330 may transmit a third polarization signal that passes the third polarization base information.

The third polarization signal may be reconstructed into a fourth polarization signal while passing the fourth polarization basis information based on the fourth quantum state generated in the communication terminal 200.

The communication terminal 200 has information on the fifth quantum state constituting an encryption key that is the original form of the first polarization signal. Conversely, for the fourth polarization signal, it does not have all information about the original encryption key, and only the quantum state that was successfully received and measured among the fourth polarization signal can be recognized.

Conversely, the server 300 has information on the sixth quantum state constituting the encryption key, which is the prototype of the third polarization signal. Meanwhile, for the second polarization signal, it does not have all the information about the original encryption key, and only the quantum state that was successfully received and measured among the second polarization signal can be recognized.

In order for both sides to use the quantum cryptography transmitted and received as valid information, the polarization basis information used by both sides must be shared. This process can be accomplished through known communication technologies such as general wired and wireless communication, such as TCP/IP, Wi-Fi, and Bluetooth, rather than optical communication.

The encryption unit 322 can control the communication module (not shown) of the server 300 to transmit the second polarization basis information and the third polarization basis information to the communication terminal 200, and receive the information from the communication terminal 200. Among the pieces of information, first polarization basis information and fourth polarization basis information can be identified.

The encryption unit 322 combines the first polarization basis information and the second polarization basis information with the quantum state information that was successfully measured among the received second polarization signals to generate a first encryption key (from the communication terminal 200 to the server 300). An encryption key obtained from the transmitted quantum encryption) can be generated.

The encryption unit 322 combines the third polarization basis information and the fourth polarization basis information with the sixth quantum state information constituting the encryption key that is the prototype of the third polarization signal to obtain a second encryption key (communication terminal from the server 300). An encryption key obtained from the quantum encryption transmitted to (200) can be generated.

The user authentication unit 323 may perform user authentication with the communication terminal 200 using at least one of the first encryption key and the second encryption key. That is, either the first encryption key or the second encryption key may be used, or user authentication may be performed by combining the first encryption key and the second encryption key.

The optical communication unit 310 of the server 300 may include a separate amplifier or attenuator (not shown) that can adjust the signal strength of the polarized signal. Additionally, the server 300 may further include a separate measuring means (not shown) capable of measuring the distance to the communication terminal 200. As an example of a distance measuring means, an embodiment in which an optical signal in the infrared band is transmitted and a reflected infrared signal is received to measure the distance is possible. Alternatively, an embodiment in which the proximity of the communication terminal 200 is detected by a change in the electric field using a capacitive sensor is also possible.

After the server 300 detects the distance to the communication terminal 200, the processor 320 determines the signal strength such that the light receiving module of the communication terminal 200 can properly filter the polarized signal into photons and measure it. The optical communication unit 310 may be controlled so that the optical communication unit 310 transmits a polarization signal having to the communication terminal 200.

At this time, the processor 320 may receive information about the sensitivity or filtering specifications of the optical reception module of the communication terminal 200 from the communication terminal 200 using a general wired or wireless communication network. When the optical communication unit 310 transmits a polarized signal to the communication terminal 200, the processor 320 determines the transmission signal strength of the polarized signal based on information about the sensitivity or filtering specifications of the optical reception module of the communication terminal 200. You can also adjust it.

Due to this interaction between the communication terminal 200 and the server 300, an authentication process using quantum cryptography can be performed even if the communication terminal 200 is equipped with a relatively inexpensive optical transmission module and optical reception module.

Figure 4 is a diagram illustrating a quantum cryptography-based communication and user authentication network system including a repeater according to an embodiment of the present invention.

Referring to FIG. 4, a communication and user authentication network system in which independent user authentication is performed in each of the repeater 420 and the communication server 430 is shown.

The communication and user authentication network system of FIG. 4 includes a communication terminal 410, a repeater 420, and a server 430. At this time, the communication terminal 410, repeater 420, and server 430 may each include a random number generator (RNG).

The communication terminal 410 selects the first polarization basis information based on a series of randomly generated first quantum states, and freely transmits the series of first polarization signals generated by the first polarization basis information to the repeater 420. It is transmitted using a free-space optical communication channel 440.

At this time, since the communication terminal 410 includes an optical reception module, it may receive a polarized signal including the quantum encryption generated by the repeater 420 through the optical communication channel 640. Since the state value of a polarization signal may change as it passes through a polarization filter, for convenience, the polarization signal transmitted from the transmitting side may be referred to as a first polarization signal, and the received signal passing through the polarization filter on the receiving side may be referred to as a second polarization signal.

The repeater 420 may include modules such as an optical receiver 310 and an optical transmitter 320 as shown for the server 300 in FIG. 3 . The repeater 420 determines the second polarization basis information based on a series of second quantum states generated by a random number generator (RNG). The repeater 420 obtains a second polarization signal by passing the first polarization signal received through the optical communication channel 440 through the second polarization base information.

Thereafter, the communication terminal 410 and the repeater 420 share the first polarization base information generated by the communication terminal 410 and the second polarization base information generated by the repeater 420 with each other through the wired and wireless communication network 460. .

Meanwhile, the repeater 420 determines third polarization basis information based on a series of third quantum states generated by a random number generator (RNG), and transmits a third polarization signal based on the third polarization basis information through the optical communication channel 440. ) is transmitted to the communication terminal 410 via.

Each of the communication terminal 410 and the repeater 420, based on the first polarization basis information and the second polarization basis information, uses a quantum encryption successfully measured by the receiving side to communicate between the communication terminal 410 and the repeater 420. The ability to generate a first encryption key and a second encryption key based on the third polarization basis information and the fourth polarization basis information is similar to the encryption key sharing process described in FIG. 5. The communication terminal 410 and the repeater 420 may share the first encryption key and the second encryption key. The repeater 420 may process first user authentication with the communication terminal 410 using either the first encryption key or the second encryption key, or both the first encryption key and the second encryption key.

Since the server 430 includes a separate random number generator (RNG), the server 430 can determine the seventh polarization basis information using separate random number generation. At this time, the repeater 420 transmits the second polarization signal to the server 630 using the optical communication channel 450, and the server 430 passes the second polarization signal through the seventh polarization base information to generate the fifth polarization signal. can be obtained. At this time, the optical communication channel 450 may be an optical cable, a free space optical communication channel, or an optical communication channel via a satellite.

At this time, the repeater 420 provides the server 430 with the second encryption key obtained from the quantum encryption generated by the repeater 420, the first encryption key generated by the communication terminal 410, and the result of the first user authentication. Information may also be transmitted through a wired or wireless communication network 470. However, in order to transmit the first encryption key and the second encryption key, the wired and wireless communication network 470 may be a dedicated channel that is completely secure and separate from the outside. The server 430 completes the authentication of the user by combining the results of the second user authentication and the first user authentication, which will be described later, and sends the information to a service provider (SP) such as payment, banking, or finance. You can request a transaction.

At this time, the communication terminal 410 and the server 430 share the first polarization base information generated by the communication terminal 410 and the seventh polarization base information generated by the server 430 with each other through the wired and wireless communication network 480. can do.

Accordingly, the server 430 generates a third encryption key between the communication terminal 410 and the server 430 based on the first polarization base information and the seventh polarization base information and shares it with the communication terminal 410, The server 430 may process second user authentication based on the third encryption key.

At this time, the server 430 may transmit information about the results of the second user authentication to the repeater 420 through the wired and wireless communication network 470.

Alternatively, according to another embodiment of the present invention, the repeater 420 may transmit a series of first polarization signals generated and transmitted by the first polarization basis information from the communication terminal 410 to the second polarization basis on the repeater 420 side. The second polarization signal generated through the information is transmitted to the server 430 through the optical communication channel 450, and at this time, the first polarization basis information and the second polarization basis information are transmitted to the server through the wired and wireless communication network 470. It can also be delivered to (430) at the same time.

Accordingly, the server 430 generates a fourth encryption key between the communication terminal 410 and the server 430 based on the first polarization base information, the second polarization base information, and the third polarization base information to communicate with the communication terminal 410. ), and the server 430 can process second user authentication.

At this time, the server 430 may transmit information about the results of the second user authentication to the repeater 420 through the wired and wireless communication network 470.

At this time, the first polarization base information on the communication terminal 410 may be transmitted from the communication terminal 410 to the server 430 via the wired and wireless communication network 480.

A polarized signal including quantum cryptography may also be generated by the server 430 and transmitted to the repeater 420 via the optical communication channel 450. Since the second user authentication is authentication between the server 430 and the communication terminal 410, for the second user authentication, the polarization signal generated by the server 430 passes through the repeater 420 and is transmitted through the optical communication channel without changing the quantum state. It is preferable to forward it to (440).

At this time, the repeater 420 may adjust the signal strength of the polarized signal received from the optical communication channel 450 and transmit it to the optical communication channel 440. The repeater 420 determines the signal strength of the polarized signal to be transmitted to the optical communication channel 440 based on the sensitivity of the optical reception module of the communication terminal 410, the performance of the attenuator of the optical reception module, and the photon detection performance information of the optical reception module. can be adjusted. Additionally, the repeater 420 may adjust the signal strength of the polarized signal to be transmitted through the optical communication channel 440 based on the distance between the communication terminal 410 and the repeater 420.

Figure 5 is a diagram showing an optical communication unit of a terminal for quantum encryption communication and a communication server according to an embodiment of the present invention.

The optical communication unit 500 includes an attenuator 510, a filter 520, and a detector 530.

The attenuator 510 is a device that attenuates a certain amount of light (quantity or amplitude of light) propagating through an optical fiber or space. It is necessary to provide appropriate input to a light receiving element or optical device, and is also used for loss evaluation of optical devices.

In general, there are ways to attenuate light by absorbing part of the light, attenuating by reflecting part of the light, and attenuating by spatially blocking part of the light. Currently, there are ways to attenuate light by reflecting part of the light. Attenuation methods are mainly used. Accordingly, it serves to adjust the first polarization signal received through the free space optical communication channel to a set constant amount.

The filter 520 serves to filter the first polarization signal adjusted to a certain amount in the attenuator 510 into a single photon, and the detector 530 measures the first quantum state of the filtered first polarization signal.

When using such an optical receiver, the polarized signal can be attenuated and polarized filtered to control it as a single photon and be received and measured.

In order to implement the attenuator, filter, and detector of Figure 5, expensive hardware is required. Therefore, it was difficult to install hardware for receiving conventional quantum cryptography in general mobile terminals or personal terminals. According to embodiments of the present invention, mobile terminals or personal terminals equipped with relatively inexpensive, low-specification hardware can be induced to utilize quantum cryptography authentication.

In the quantum cryptography authentication process according to an embodiment of the present invention, a communication terminal and a server or repeater device can transmit and receive quantum signals including quantum cryptography using proximity free-space optical communication. there is. At this time, if the communication terminal is located close to the server or repeater device and the reference distance, for example, within 10 cm, the possibility that a third party can eavesdrop on the quantum encryption is very low. Therefore, a relatively simple quantum cryptography technique can sufficiently achieve the desired goal. Additionally, when a user uses a typical mobile communication terminal, the minimum information required for sharing an encryption key can be transmitted/received by applying general wireless communication and short-distance communication techniques that the mobile communication terminal can access.

By adjusting the signal strength of the quantum signal to be transmitted, the server or repeater device can control the signal strength so that a mobile terminal equipped with relatively low-end hardware has no difficulty in receiving the quantum signal. The server or repeater device adaptively adjusts the signal strength of the quantum signal based on the distance between the mobile terminal and the server or repeater, or adaptively adjusts the signal strength of the quantum signal based on the specifications or characteristics of the quantum signal reception hardware of the mobile terminal. You can also adjust it with .

Additionally, the server or repeater device may search for the optimal signal strength when transmitting a quantum signal by executing the quantum cryptography authentication process several times using different sets of quantum cryptography.

In the communication terminal/mobile terminal according to the present invention, the desired function can be satisfied with relatively low-cost hardware instead of installing expensive hardware to receive quantum signals, so the present invention is better than the conventional quantum cryptography communication technique. There is a significant cost saving effect.

The communication terminal mentioned in this specification may be a mobile communication terminal including a smartphone, PDA, and portable phone. Communication terminals can generate and transmit quantum cryptography using a polarization signal generator that combines a random number generator (RNG) and a laser diode, and can measure and interpret quantum cryptography in single photon units using an attenuator and polarization filter. .

The quantum cryptography authentication method that can be executed in a communication terminal, server, or repeater according to an embodiment of the present invention may be implemented in the form of program instructions that can be executed through various computer means and recorded on a computer-readable medium. Computer-readable media may include program instructions, data files, data structures, etc., singly or in combination. Program instructions recorded on the medium may be those specifically designed and constructed for the present invention, or may be known and available to those skilled in the art of computer software. Examples of computer-readable recording media include magnetic media such as hard disks, floppy disks, and magnetic tapes, optical media such as CD-ROMs and DVDs, and magnetic media such as floptical disks. -Includes optical media (magneto-optical media) and hardware devices specifically configured to store and execute program instructions, such as ROM, RAM, flash memory, etc. Examples of program instructions include machine language code, such as that produced by a compiler, as well as high-level language code that can be executed by a computer using an interpreter, etc. The hardware devices described above may be configured to operate as one or more software modules to perform the operations of the present invention, and vice versa.

The embodiments of the present invention described above have been described with reference to the embodiments shown in the drawings to aid understanding, but these are merely exemplary, and those skilled in the art will be able to make various modifications and other equivalent embodiments therefrom. You will understand that it is possible. Therefore, the true technical protection scope of the present invention should be determined by the appended claims.

110: communication terminal 120, 300: server
130: optical communication channel 140: communication network
200: communication terminal 210: polarization generator
220, 500: Optical communication unit 230: Quantum signal generation unit
240: processor 241: random number generator
242: encryption unit 243: user authentication unit
300: Quantum cryptography authentication server 310: Optical communication unit 320: Processor 330: Polarization generator 321: Random number generator 322: Encryption unit 323: User authentication unit 410: Communication terminal 420: Repeater 430: Communication server 440, 450: Optical communication Channels 460, 470, 480: Wired and wireless communication networks
510: Attenuator 520: Filter
530: detector

Claims (5)

In the communication terminal 200 that performs quantum cryptography communication mounted on an unmanned vehicle, generates a quantum cryptography, and shares polarization basis information used to generate the quantum cryptography with a server,
A polarization generator that consists of a polarization filter, generates polarization basis information based on a series of randomly generated quantum states, and generates a series of first polarization signals using the first polarization basis information among the generated polarization basis information. (210);
A series of polarization signals generated by the polarization generator 210 are transmitted to the server, and the server receives a series of polarization signals generated by passing the polarization basis information, and the first quantum signal among the generated polarization basis information is transmitted to the server. An optical communication unit 220 that receives a series of first quantum signals (polarization signals) generated by passing through a filter (polarization basis information);
A quantum signal generator 230 that generates a first quantum signal by setting a first quantum filter in the receiving path of the second quantum signal among the series of quantum signals generated and transmitted from the server; and
A processor 240 that selects the setting of a first quantum filter based on a series of randomly generated first quantum states and controls the quantum signal generator 230 to generate a first quantum signal by the first quantum filter. Contains ;,
The processor 240 is
A random number generator 241 that randomly generates a series of first quantum states based on random numbers,
Controls the communication module of the communication terminal to transmit the first polarization base information to the server via a communication network different from the path through which the first polarization signal is received, and generates an encryption key based on the first polarization base information and the second polarization base information. An encryption unit 242 that generates and
It includes a user authentication unit 243 that performs user authentication with the server using either an encryption key generated by the encryption unit or an encryption key generated by a quantum password received from the server,
The quantum signal generator 230 is Calculate the rotation amount of polarization according to the relational expression, and use the second quantum filter 4 among the polarization basis information generated by the polarization generator 210. A communication terminal that performs quantum encryption communication mounted on an unmanned vehicle, characterized in that it rotates at an angle of.
( is the angular momentum per unit mass of the satellite, is the distance to the satellite, is the Schwarzschild radius of the Earth)
According to claim 1,
The encryption unit 242 generates a symmetric encryption key based on natural quantum random numbers,
A one-time encryption key that deletes the previously stored encryption key and uses a new encryption key one-time, or
The change cycle is determined by counting the usage time or number of uses of the used encryption key. If the change cycle is determined, the encryption key in use is deleted and a new encryption key is used to create one of a plurality of encryption keys. A communication terminal that performs quantum encryption communication mounted on an unmanned vehicle.
According to claim 1,
The encryption unit 242 is
It is connected through a receiving path of the first quantum signal and the second quantum signal, and further includes an add-on chip that is coupled and separably connected by a unique identification code of the electronic device, and the encryption unit 242 stores the content to be encrypted. An unmanned mobile device that determines, generates a pair of master key and session key, stores them in an add-on chip, encrypts the content by combining it with the session key, and transmits it to an electronic device, wherein the electronic device decrypts the encrypted content. A communication terminal that performs quantum encryption communication mounted on a .
According to claim 1,
It further includes a server 300 that performs mutual authentication with the communication terminal 200 to authenticate the user of the communication terminal 200,
The server 300 is
An optical communication unit 310 that includes either an amplifier or an attenuator to adjust the signal strength of the polarized signal,
It includes a processor 320 that adjusts the transmission signal strength of the polarized signal transmitted by the optical communication unit 310 to the communication terminal 200 based on information about the sensitivity or filtering specifications of the optical reception module of the communication terminal 200. ,
The processor 320 is
A random number generator 321 that generates a series of quantum states based on random numbers,
An encryption unit 322 that controls the communication module of the server to transmit polarization basis information to the communication terminal 200 and identifies polarization basis information among the information received from the communication terminal 200;
Perform quantum encryption communication mounted on an unmanned mobile device, characterized by including a user authentication unit 323 that performs user authentication with the communication terminal using an encryption key generated from the quantum encryption delivered to the communication terminal 200. A communication terminal.
delete